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REMARKS 

A correction has been made to the specification to add an omitted reference number. 
Claims 1, 3 - 6, 12 - 13, 18 - 19, 22, 24 - 27, 33 - 34, 39 - 40, and 43 - 46 have been amended, 
No new matter has been introduced with these corrections or amendments, which are supported 
in the specification as originally filed. Claims 1 - 46 remain in the application. 

I. Objection to the Claims 

Paragraph 3 of the Office Action dated July 12, 2004 (hereinafter, "the Office Action") 
states that Claims 44 - 46 are objected to because of a typographical error therein. Appropriate 
correction has been made, and the Examiner is respectfully requested to withdraw the objection. 

II. Rejection Under 35 U.S C. $112 

Paragraph 4 of the Office Action states that Claims 1, 22, and 43 (which are independent 
claims) are rejected under 35 U.S C. §112, second paragraph, as being indefinite. Applicants 
respectfully submit that the quoted language presented in Paragraph 4 is incorrect. These 
independent claims specify "propagating security credentials HSJtifi a trusted authenticating 
domain" (emphasis added), not "... from a trusted authenticating domain'*. The trusted 
authenticating domain is "used" when validating the user. See lines 10-11 of amended Claim 1, 
for example. Accordingly, Applicants respectfully submit that these claim preambles are not 
indefinite, and the Examiner is respectfully requested to withdraw the §1 12 rejection. 

m. Rejection Under 35 U.S.C. U02(b) 
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Paragraph 5 of the Office Action states that Claims 1 - 17, 19 - 38, and 40 - 46 are 
rejected under 35 U.S.C. §102(b) as being anticipated by U. S> Patent 5,862,323 to Blakley et al. 
This rejection is respectfully traversed. 

Applicants have amended their independent Claims 1, 22, and 43 herein to more clearly 
specify that it is an identifying secret "received ... during propfl g?tinn request processing" 
(emphasis added) that is propagated from the password synchronization agent to a master 
registry, if validation of the user's information by a trusted authenticating domain succeeds. By 
contrast, Blakley propagates a password that has been received, and stored, at some unspecified 
prior time. This was discussed in Applicants' prior response, dated May 5, 2004, which stated 
that it is ' Ttlhis same information" (Le., the newly-received identifying secret, not an already- 
stored identifying secret) that is propagated according to Applicants* independent claims. 
Blakley has no teaching of receiving a user password, or other type of user identifying secret, 
during his disclosed propagation request processing techniques^ as will now be described. 

In Blakley's "pull" technique, a foreign registry requests propagation of information. 
This pull technique is represented in Fig. 4, In contrast to their independent claims, Blakley has 
no teachings that this pull technique receives a user identifier and identifying secret from a client 
during propagation request processing . Appli cants note that Blocks 410 - 422 of Fig. 4, which da 
involve client input, are a distinct processiflgpath that is separate from the processing path of the 
pull technique which begins at Block 424. That is, the "password update" processing of Blocks 
410 - 422 stores the updated password and then ends, without performing any propagation, at the 
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"Return" block which is located above Block 450. 

This "pull" technique therefore fails to teach the "receiving .. ." limitation of Applicants 1 
independent claims — and as a result, Blakley also fails to teach Applicants* claim limitations of 
"validating the user ... using the received user identifier and identifying secret .." (emphasis 
added) and "propagating the received identifying secret ..." (emphasis added). 

In Blakley's "push" technique, represented in Fig. 5, a client requests either creation of a 
new account (with a new password) or change of an existing password. This is not, however, 
"propagation request" processing: it is, as stated in Block 510, "account creation or password 
change" processing- Furthermore, Blakley* s disclosed "push" technique does not include 
"validating the user with [a] trusted authenticating domain , . which is a limitation of 
Applicants' independent claims. 

Applicants therefore respectfully submit that independent Claims 1 ? 22, and 43, as 
amended, are patentable over the reference. Dependent Claims 2 - 17, 19 - 21, 23 - 38, 40 - 42, 
and 44 - 46 are therefore patentable over the reference as well. Accordingly, Applicants 
respectfully request that the Examiner withdraw the §102 rejection. 

IV. Rejection Under 35 U.S.C. S103fal 

Paragraph 6 of the Office Action states that Claims 18 and 39 are rejected under 35 
US,C §1 03(a) as being unpatentable over Blakley in view of U. S. Patent 6,240,184 to Huynh et 

Serial No. 09/614,087 -18- Docket RSW9-2000-0074-US1 



PAGE 20121 ' RCVD AT 9/112004 9:18:32 AM [Eastern Daylight Time] ' SVR:USPTO£FXRM/0 " DNIS:8729306 * CS1D:4073437587 1 DURATION (mm-ss):0540 



09/01/2004 09:21 4073437587 FAX PAGE 21 



al This rejection is respectfully traversed. 

As discussed above, Blakley fails to teach limitations of Applicants' independent claims. 
Thus, Huynh cannot be combined with Blakley to render dependent Claims 1 8 and 39 
unpatentable, Furthermore, Blakley fails to teach "performing a security function on the received, 
identifying secret " (Claims 18 and 39, first limitation, emphasis added) and also fails to teach 
"using the received user identifier to locate a previously-stored identifying secret ..." (Claims 18 
and 39, second limitation, emphasis added), where this secret was received "during propagation 
request processing" (Claims 1 and 22). Applicants therefore respectfully submit that zprima 
facie case of obviousness has not been made out, and the Examiner is respectfully requested to 
withdraw the §103 rejection. 

V. Conclusion 

Applicants respectfully request reconsideration of the pending rejected claims* 
withdrawal of all presently outstanding objections and rejections, and allowance of all claims at 
an early date. 

Respectfully submitted, 

Marcia L, Doubet 
Attorney for Applicants 
Reg. No. 40,999 

Customer Number for Correspondence: 25260 
Phone: 407-343-7586 
Fax: 407-343-7587 

Serial No. 09/6 1 4,087 -1 9- Docket RSW9-2000-0074-US 1 



PAGE 21121 ' RCVD AT 9/1/2004 9:18:32 AM [Eastern Daylight Time] * SVR:USPTO-EFXRF-1/0 * DNIS:8729306 • CSID:4073437S87 ' DURATION (mm-ss):0540 



